Commit graph

19653 commits

Author SHA1 Message Date
Florian Klink 964c419bc0
Merge pull request #107497 from helsinki-systems/fix/tmp-mount
nixos/tmp: Make /tmp on ramdisk usable again
2021-01-08 23:54:46 +01:00
Bjørn Forsman 72d906a0ea nixos: fix "nixos-rebuild build-vm-with-bootloader" for EFI systems
(The first version of this change, in commit 39fad297fd, broke
`nix-build -A nixosTests.installer.simpleUefiSystemdBoot`. This is the
2nd version, which hopefully does not break anything.)

`nixos-rebuild build-vm-with-bootloader` currently fails with the
default NixOS EFI configuration:

  $ cat >configuration.nix <<EOF
  {
    fileSystems."/".device = "/dev/sda1";
    boot.loader.systemd-boot.enable = true;
    boot.loader.efi.canTouchEfiVariables = true;
  }
  EOF

  $ nixos-rebuild build-vm-with-bootloader -I nixos-config=$PWD/configuration.nix -I nixpkgs=https://github.com/NixOS/nixpkgs/archive/nixos-20.09.tar.gz
  [...]
  insmod: ERROR: could not insert module /nix/store/1ibmgfr13r8b6xyn4f0wj115819f359c-linux-5.4.83/lib/modules/5.4.83/kernel/fs/efivarfs/efivarfs.ko.xz: No such device
  mount: /sys/firmware/efi/efivars: mount point does not exist.
  [    1.908328] reboot: Power down
  builder for '/nix/store/dx2ycclyknvibrskwmii42sgyalagjxa-nixos-boot-disk.drv' failed with exit code 32
  [...]

Fix it by setting virtualisation.useEFIBoot = true when needed.

Before:
* release-20.03: successful build, unsuccessful run
* release-20.09 (and master): unsuccessful build

After:
* Successful build and run.

Fixes #107255
2021-01-08 19:36:10 +01:00
Alyssa Ross 8694e7de25 nixos/getty: add services.getty.loginOptions
This corresponds to agetty's --login-options argument.

With this change, I can set

    services.getty.autologinUser = "qyliss";
    services.getty.loginOptions = "-- \\u";

and have my username prefilled, but with my password still
required (unlike the normal autologinUser behaviour).
2021-01-08 13:55:25 +00:00
Sandro 2b1f8235b4
Merge pull request #108402 from ymatsiuk/add-appgate-sdp 2021-01-08 10:51:27 +01:00
Florian Klink 9414948a5a
Merge pull request #108440 from aanderse/nixos/redis
nixos/redis: replace extraConfig option with settings option
2021-01-08 00:33:14 +01:00
Sandro 58514b3428
Merge pull request #108380 from Patryk27/fixes/lxd-cgroup-v2
nixos/lxd: disable cgroup v2 when LXD is active
2021-01-08 00:23:35 +01:00
Sandro b6fe20a272
Merge pull request #108626 from asbachb/new/nufraw
nufraw: init at 0.43-3
2021-01-07 23:42:05 +01:00
Benjamin Asbach e02bf0737b nufraw: init at 0.43-3
`nufraw` is used to manipulate raw images.
`nufraw-thumbnailer` is used to generate thumbnails for raw images.

relates #108444
2021-01-07 22:41:34 +01:00
WORLDofPEACE 70f5ea8836
Merge pull request #108541 from MetaDark/nixos/pipewire
nixos/pipewire: improve assertion messages
2021-01-07 14:35:50 -05:00
Yurii Matsiuk 239fa096b4
appgate-sdp: init at 5.1.2 2021-01-07 20:29:58 +01:00
Kira Bruneau ddf11daac7 nixos/pipewire: improve assertion messages 2021-01-07 13:11:05 -05:00
Kevin Cox 8455fa3bca
Merge pull request #105347 from Mic92/nginx
nixos/nginx: add streamConfig option
2021-01-07 08:46:29 -05:00
Maximilian Bosch 1f7cbcca90
Merge pull request #108519 from Ma27/nextcloud-docs
nextcloud: improve documentation on defaults
2021-01-07 12:00:30 +01:00
Linus Heckemann c1891ad2e0
Merge pull request #108579 from alyssais/mailman
nixos/mailman: remove spurious uwsgi.service dep
2021-01-06 14:16:53 +01:00
Andreas Rammhold f41f0643f8
Merge pull request #107936 from andir/ml2pr/hoogle-set-the-host-to-bind-on
hoogle: set the host to bind on
2021-01-06 12:31:59 +01:00
Alyssa Ross c7d13b551e
nixos/mailman: remove spurious uwsgi.service dep
b478e0043c removed every other instance of uwsgi.service and
httpd.service from Mailman before and requiredBy lists.  This one
looks like it was just missed, since I can't see a reason to keep it
but remove the others.

Fixes: b478e0043c ("nixos/mailman: refactor")
2021-01-06 10:44:29 +00:00
Jörg Thalheim 4dc8d7c9c1
Merge pull request #108524 from ju1m/tor
nixos/tor: fix client.dns.automapHostsSuffixes renaming
2021-01-06 06:52:06 +00:00
Julien Moutinho 74f9321966 nixos/tor: fix client.dns.automapHostsSuffixes renaming 2021-01-05 22:34:01 +01:00
Maximilian Bosch 78f022e791
nextcloud: improve documentation on defaults
* It should be made explicit in the eval-error that the CVE only affects
  a component which is turned off by default.
* For more clarity, the default version used by the module is noted in
  the manual.

Closes #108419
2021-01-05 22:32:05 +01:00
Jörg Thalheim a14ea3aecc
Merge pull request #97740 from ju1m/tor
nixos/tor: improve type-checking and hardening
2021-01-05 16:00:40 +00:00
Michele Guerini Rocco 99bfa4bb60
Merge pull request #107834 from pacien/fishPlugins-init
fishPlugins: create scope and add some plugins
2021-01-05 16:48:22 +01:00
WORLDofPEACE 57e1a17ad0
Merge pull request #108465 from alyssais/getty
nixos/getty: rename from services.mingetty
2021-01-05 10:10:34 -05:00
Kevin Cox e10ef1faec
Merge pull request #108131 from thiagokokada/opentabletdriver-misc-improvements
opentabletdriver: misc improvements to package/module
2021-01-05 08:20:39 -05:00
Alyssa Ross 6c3d21aff9
nixos/getty: rename from services.mingetty
It's been 8.5 years since NixOS used mingetty, but the option was
never renamed (despite the file definining the module being renamed in
9f5051b76c ("Rename mingetty module to agetty")).

I've chosen to rename it to services.getty here, rather than
services.agetty, because getty is implemantation-neutral and also the
name of the unit that is generated.
2021-01-05 09:09:42 +00:00
Robert Hensing 5540dd9b9b
Merge pull request #108416 from srhb/streamlayeredimage-symlinked-storepaths
dockerTools: Fix streamLayeredImage for symlinks
2021-01-05 10:00:28 +01:00
Alyssa Ross 178ec8974f nixos/nginx: allow overriding fastcgi params
By default in Nginx, if you want to override a single fastcgi_param,
you have to override all of them.  This is less of a big deal if
you're editing the Nginx configuration directly, but when you're
generating the Nginx configuration with Nix it can be very annoying to
bloat your configuration repeating the default values of FastCGI
parameters every time.

This patch adds a fastcgiParams option to Nginx locations.  If any
parameters are set through this, all the default values will be
included as well, so only the ones that are changing need to be
supplied.  There's no way to use fastcgiParams to actually override
all parameters if that's what you want, but I think that's a niche use
case and it's still possible using extraConfig, which up until now was
the only option

Nginx allows the fastcgi_param directive in http and server scopes as
well as location, but here I only support location.  It would be
possible to support the others, but I don't think it's worth it.  It
would be a possible future enhancement if somebody has a need for it.
2021-01-05 03:36:18 +00:00
Léo Gaspard a7331d1403 nixos tests: fix postgresql-wal-receiver 2021-01-05 04:12:53 +01:00
Léo Gaspard fe8ec6a07f nixos tests: fix postgresql-wal-receiver.nix's eval 2021-01-05 04:05:38 +01:00
Aaron Andersen 1a828f66dc nixos/redis: replace extraConfig option with settings option 2021-01-04 20:08:38 -05:00
Sarah Brofeldt ffe5ff6009 dockerTools: Test buildLayeredImage with symlinks
This exercises layer creation in face of store path symlinks, ensuring
they are not dereferenced, which can lead to broken layer tarballs
2021-01-04 21:44:47 +01:00
pacien d94921db12 fish-foreign-env: move to fishPlugins.foreign-env
And relocate the installed fish functions to the `vendor_functions.d` so
that they're automatically loaded.
2021-01-04 18:53:59 +01:00
Andreas Rammhold 653f805f09 nixos/tests/dovecot: enable dovecot_pigeonhole plugin
This plugin is used commonly enough that we should ensure it still
builds (and dovecot works) after loading it.

This is not yet perfect as we aren't testing any of it's functionality
but at least we ensure that dovecot continues to do the regular job.
2021-01-04 18:17:26 +01:00
talyz 0f0d5c0c49
profiles/hardened: Add note about potential instability
Enabling the profile can lead to hard-to-debug issues, which should be
warned about in addition to the cost in features and performance.

See https://github.com/NixOS/nixpkgs/issues/108262 for an example.
2021-01-04 16:03:29 +01:00
Eelco Dolstra dd23fc0ca2
Typo 2021-01-04 12:44:03 +01:00
Patryk Wychowaniec 30ccbe8eec
nixos/lxd: disable cgroup v2 when LXD is active 2021-01-04 11:25:30 +01:00
Julien Moutinho 0ccdd6f2b0 nixos/tor: improve type-checking and hardening
Fixes #77395.
Fixes #82790.
2021-01-04 01:02:26 +01:00
Maximilian Bosch 3b57908018
Merge pull request #108179 from WilliButz/update/prometheus-json-exporter/0.2.0
prometheus-json-exporter: unstable-2017-10-06 -> 0.2.0
2021-01-03 19:28:12 +01:00
Maximilian Bosch 6e43cc7fb0
nixos/prometheus-exporters: minor doc improvements
* Content of `programlisting` shouldn't be indented, otherwise it's
  weirdly indented in the output.
* Use `<xref linkend=.../>` in the release notes: then users can
  directly go to the option documentation when reading release notes.
* Don't use docbook tags in `mkRemovedOptionModule`: it's only used
  during evaluation where docbook isn't rendered.
2021-01-03 19:04:33 +01:00
Phillip Cloud 287939e2ed nixos/prometheus: update relabel_action list 2021-01-03 11:01:30 -05:00
Milan Pässler 12f3e2c42c nixos/tests/shadow: add switch user subtest 2021-01-03 15:54:48 +01:00
Milan Pässler 018072ea22 nixos/pam: use pam_faillock instead of pam_tally
Fixes #108313

\#107185 removed pam_tally, in favor of pam_faillock (see release notes).
2021-01-03 15:54:23 +01:00
github-actions[bot] bc30d1eb34
Merge master into staging-next 2021-01-03 00:56:46 +00:00
ajs124 e78177e55e
Merge pull request #107597 from helsinki-systems/upd/xfsprogs
xfsprogs: 4.19 -> 5.10
2021-01-02 23:55:09 +01:00
Tim Steinbach 4c9414d31c hub: Add test 2021-01-02 15:43:01 -05:00
ajs124 a2267f6341 xfsprogs: 4.19 -> 5.10 2021-01-02 18:45:22 +01:00
Thiago Kenji Okada a2391053b6 nixos/opentabletdriver: add package option 2021-01-02 14:09:31 -03:00
github-actions[bot] ec161d2240
Merge master into staging-next 2021-01-02 12:24:09 +00:00
WilliButz 3f94c66ee1
nixos/prometheus-json-exporter: update modules & tests, add release notes 2021-01-02 13:10:27 +01:00
Thomas Tuegel f69c648da4
Merge pull request #108128 from ttuegel/plasma-sync-qt-version
nixos/plasma5: synchronize Qt version with all-packages.nix
2021-01-02 05:47:02 -06:00
Florian Klink 71e24364c9
Merge pull request #108184 from lovesegfault/command-not-found-nix-shell
nixos/command-not-found: don't suggest nix-env
2021-01-02 12:04:43 +01:00